Yes, if you have audits, most probably they will look for protocols traffic rather than just ports open